AI Platform Data Labeling Service roles and permissions

This page lists the IAM roles and permissions for AI Platform Data Labeling Service. Tosearch through all roles and permissions, see therole andpermission index.

AI Platform Data Labeling Service roles

Role Permissions

Role	Permissions
Data Labeling Service Admin^Beta (`roles/datalabeling.admin`) Full access to all Data Labeling resources	`datalabeling.*` `datalabeling.annotateddatasets.delete` `datalabeling.annotateddatasets.get` `datalabeling.annotateddatasets.label` `datalabeling.annotateddatasets.list` `datalabeling.annotationspecsets.create` `datalabeling.annotationspecsets.delete` `datalabeling.annotationspecsets.get` `datalabeling.annotationspecsets.list` `datalabeling.dataitems.get` `datalabeling.dataitems.list` `datalabeling.datasets.create` `datalabeling.datasets.delete` `datalabeling.datasets.export` `datalabeling.datasets.get` `datalabeling.datasets.import` `datalabeling.datasets.list` `datalabeling.examples.get` `datalabeling.examples.list` `datalabeling.instructions.create` `datalabeling.instructions.delete` `datalabeling.instructions.get` `datalabeling.instructions.list` `datalabeling.operations.cancel` `datalabeling.operations.get` `datalabeling.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Data Labeling Service Editor^Beta (`roles/datalabeling.editor`) Editor of all Data Labeling resources	`datalabeling.*` `datalabeling.annotateddatasets.delete` `datalabeling.annotateddatasets.get` `datalabeling.annotateddatasets.label` `datalabeling.annotateddatasets.list` `datalabeling.annotationspecsets.create` `datalabeling.annotationspecsets.delete` `datalabeling.annotationspecsets.get` `datalabeling.annotationspecsets.list` `datalabeling.dataitems.get` `datalabeling.dataitems.list` `datalabeling.datasets.create` `datalabeling.datasets.delete` `datalabeling.datasets.export` `datalabeling.datasets.get` `datalabeling.datasets.import` `datalabeling.datasets.list` `datalabeling.examples.get` `datalabeling.examples.list` `datalabeling.instructions.create` `datalabeling.instructions.delete` `datalabeling.instructions.get` `datalabeling.instructions.list` `datalabeling.operations.cancel` `datalabeling.operations.get` `datalabeling.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Data Labeling Service Agent (`roles/datalabeling.serviceAgent`) Gives Data Labeling service account read/write access to Cloud Storage, read/write BigQuery, update CMLE model versions, editor access to Annotation service and AutoML service. Warning: Do not grant service agent roles to any principals except service agents.	`automl.annotationSpecs.` `automl.annotationSpecs.create` `automl.annotationSpecs.delete` `automl.annotationSpecs.get` `automl.annotationSpecs.list` `automl.annotationSpecs.update` `automl.annotations.` `automl.annotations.approve` `automl.annotations.create` `automl.annotations.list` `automl.annotations.manipulate` `automl.annotations.reject` `automl.columnSpecs.` `automl.columnSpecs.get` `automl.columnSpecs.list` `automl.columnSpecs.update` `automl.datasets.create` `automl.datasets.delete` `automl.datasets.export` `automl.datasets.get` `automl.datasets.import` `automl.datasets.list` `automl.datasets.update` `automl.examples.` `automl.examples.delete` `automl.examples.get` `automl.examples.list` `automl.examples.update` `automl.files.` `automl.files.delete` `automl.files.list` `automl.humanAnnotationTasks.` `automl.humanAnnotationTasks.create` `automl.humanAnnotationTasks.delete` `automl.humanAnnotationTasks.get` `automl.humanAnnotationTasks.list` `automl.locations.get` `automl.locations.list` `automl.modelEvaluations.` `automl.modelEvaluations.create` `automl.modelEvaluations.get` `automl.modelEvaluations.list` `automl.models.create` `automl.models.delete` `automl.models.deploy` `automl.models.export` `automl.models.get` `automl.models.list` `automl.models.predict` `automl.models.undeploy` `automl.operations.` `automl.operations.cancel` `automl.operations.delete` `automl.operations.get` `automl.operations.list` `automl.tableSpecs.` `automl.tableSpecs.get` `automl.tableSpecs.list` `automl.tableSpecs.update` `bigquery.datasets.create` `bigquery.datasets.get` `bigquery.jobs.create` `bigquery.jobs.get` `bigquery.tables.create` `bigquery.tables.get` `bigquery.tables.getData` `ml.jobs.create` `ml.jobs.get` `ml.jobs.getIamPolicy` `ml.jobs.list` `ml.locations.` `ml.locations.get` `ml.locations.list` `ml.models.` `ml.models.create` `ml.models.delete` `ml.models.get` `ml.models.getIamPolicy` `ml.models.list` `ml.models.predict` `ml.models.setIamPolicy` `ml.models.update` `ml.operations.get` `ml.operations.list` `ml.projects.getConfig` `ml.studies.` `ml.studies.create` `ml.studies.delete` `ml.studies.get` `ml.studies.getIamPolicy` `ml.studies.list` `ml.studies.setIamPolicy` `ml.trials.` `ml.trials.create` `ml.trials.delete` `ml.trials.get` `ml.trials.list` `ml.trials.update` `ml.versions.` `ml.versions.create` `ml.versions.delete` `ml.versions.get` `ml.versions.list` `ml.versions.predict` `ml.versions.update` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.effectivepolicy.get` `serviceusage.groups.*` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.values.test` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list` `storage.objects.update`
Data Labeling Service Viewer^Beta (`roles/datalabeling.viewer`) Viewer of all Data Labeling resources	`datalabeling.annotateddatasets.get` `datalabeling.annotateddatasets.list` `datalabeling.annotationspecsets.get` `datalabeling.annotationspecsets.list` `datalabeling.dataitems.` `datalabeling.dataitems.get` `datalabeling.dataitems.list` `datalabeling.datasets.get` `datalabeling.datasets.list` `datalabeling.examples.` `datalabeling.examples.get` `datalabeling.examples.list` `datalabeling.instructions.get` `datalabeling.instructions.list` `datalabeling.operations.get` `datalabeling.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Data Labeling Service Admin^Beta

(roles/datalabeling.admin)

Full access to all Data Labeling resources

datalabeling.*

datalabeling.annotateddatasets.delete
datalabeling.annotateddatasets.get
datalabeling.annotateddatasets.label
datalabeling.annotateddatasets.list
datalabeling.annotationspecsets.create
datalabeling.annotationspecsets.delete
datalabeling.annotationspecsets.get
datalabeling.annotationspecsets.list
datalabeling.dataitems.get
datalabeling.dataitems.list
datalabeling.datasets.create
datalabeling.datasets.delete
datalabeling.datasets.export
datalabeling.datasets.get
datalabeling.datasets.import
datalabeling.datasets.list
datalabeling.examples.get
datalabeling.examples.list
datalabeling.instructions.create
datalabeling.instructions.delete
datalabeling.instructions.get
datalabeling.instructions.list
datalabeling.operations.cancel
datalabeling.operations.get
datalabeling.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Data Labeling Service Editor^Beta

(roles/datalabeling.editor)

Editor of all Data Labeling resources

datalabeling.*

datalabeling.annotateddatasets.delete
datalabeling.annotateddatasets.get
datalabeling.annotateddatasets.label
datalabeling.annotateddatasets.list
datalabeling.annotationspecsets.create
datalabeling.annotationspecsets.delete
datalabeling.annotationspecsets.get
datalabeling.annotationspecsets.list
datalabeling.dataitems.get
datalabeling.dataitems.list
datalabeling.datasets.create
datalabeling.datasets.delete
datalabeling.datasets.export
datalabeling.datasets.get
datalabeling.datasets.import
datalabeling.datasets.list
datalabeling.examples.get
datalabeling.examples.list
datalabeling.instructions.create
datalabeling.instructions.delete
datalabeling.instructions.get
datalabeling.instructions.list
datalabeling.operations.cancel
datalabeling.operations.get
datalabeling.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Data Labeling Service Agent

(roles/datalabeling.serviceAgent)

Gives Data Labeling service account read/write access to Cloud Storage, read/write BigQuery, update CMLE model versions, editor access to Annotation service and AutoML service.

Warning: Do not grant service agent roles to any principals except service agents.

automl.annotationSpecs.*

automl.annotationSpecs.create
automl.annotationSpecs.delete
automl.annotationSpecs.get
automl.annotationSpecs.list
automl.annotationSpecs.update

automl.annotations.*

automl.annotations.approve
automl.annotations.create
automl.annotations.list
automl.annotations.manipulate
automl.annotations.reject

automl.columnSpecs.*

automl.columnSpecs.get
automl.columnSpecs.list
automl.columnSpecs.update

automl.datasets.create

automl.datasets.delete

automl.datasets.export

automl.datasets.get

automl.datasets.import

automl.datasets.list

automl.datasets.update

automl.examples.*

automl.examples.delete
automl.examples.get
automl.examples.list
automl.examples.update

automl.files.*

automl.files.delete
automl.files.list

automl.humanAnnotationTasks.*

automl.humanAnnotationTasks.create
automl.humanAnnotationTasks.delete
automl.humanAnnotationTasks.get
automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.list

automl.modelEvaluations.*

automl.modelEvaluations.create
automl.modelEvaluations.get
automl.modelEvaluations.list

automl.models.create

automl.models.delete

automl.models.deploy

automl.models.export

automl.models.get

automl.models.list

automl.models.predict

automl.models.undeploy

automl.operations.*

automl.operations.cancel
automl.operations.delete
automl.operations.get
automl.operations.list

automl.tableSpecs.*

automl.tableSpecs.get
automl.tableSpecs.list
automl.tableSpecs.update

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.jobs.get

bigquery.tables.create

bigquery.tables.get

bigquery.tables.getData

ml.jobs.create

ml.jobs.get

ml.jobs.getIamPolicy

ml.jobs.list

ml.locations.*

ml.locations.get
ml.locations.list

ml.models.*

ml.models.create
ml.models.delete
ml.models.get
ml.models.getIamPolicy
ml.models.list
ml.models.predict
ml.models.setIamPolicy
ml.models.update

ml.operations.get

ml.operations.list

ml.projects.getConfig

ml.studies.*

ml.studies.create
ml.studies.delete
ml.studies.get
ml.studies.getIamPolicy
ml.studies.list
ml.studies.setIamPolicy

ml.trials.*

ml.trials.create
ml.trials.delete
ml.trials.get
ml.trials.list
ml.trials.update

ml.versions.*

ml.versions.create
ml.versions.delete
ml.versions.get
ml.versions.list
ml.versions.predict
ml.versions.update

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

Data Labeling Service Viewer^Beta

(roles/datalabeling.viewer)

Viewer of all Data Labeling resources

datalabeling.annotateddatasets.get

datalabeling.annotateddatasets.list

datalabeling.annotationspecsets.get

datalabeling.annotationspecsets.list

datalabeling.dataitems.*

datalabeling.dataitems.get
datalabeling.dataitems.list

datalabeling.datasets.get

datalabeling.datasets.list

datalabeling.examples.*

datalabeling.examples.get
datalabeling.examples.list

datalabeling.instructions.get

datalabeling.instructions.list

datalabeling.operations.get

datalabeling.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

AI Platform Data Labeling Service permissions

Permission	Included in roles
`datalabeling.annotateddatasets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.annotateddatasets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.annotateddatasets.label`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Support User (`roles/iam.supportUser`)
`datalabeling.annotateddatasets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`datalabeling.annotationspecsets.create`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.annotationspecsets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.annotationspecsets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`)
`datalabeling.annotationspecsets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`datalabeling.dataitems.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.dataitems.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.create`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.export`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.datasets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.datasets.import`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.examples.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`)
`datalabeling.examples.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`datalabeling.instructions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.instructions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.instructions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`)
`datalabeling.instructions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`datalabeling.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.

Movatterモバイル変換

AI Platform Data Labeling Service roles and permissions